Digital commerce remains the richest target for cybercriminals, yet physical payment threats remain strong.